CVE-2024-44990

bonding: fix null pointer deref in bond_ipsec_offload_ok

State
Published
Severity
Not scored
Published
Sep 4, 2024
Updated
Oct 15, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bonding: fix null pointer deref in bond_ipsec_offload_ok

We must check if there is an active slave before dereferencing the pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 18cb261afd7bf50134e5ccacc5ec91ea16efadd4 to before 81216b9352be43f8958092d379f6dec85443c309Affected
  • 18cb261afd7bf50134e5ccacc5ec91ea16efadd4 to before 2f5bdd68c1ce64bda6bef4d361a3de23b04ccd59Affected
  • 18cb261afd7bf50134e5ccacc5ec91ea16efadd4 to before 32a0173600c63aadaf2103bf02f074982e8602abAffected
  • 18cb261afd7bf50134e5ccacc5ec91ea16efadd4 to before 0707260a18312bbcd2a5668584e3692d0a29e3f6Affected
  • 18cb261afd7bf50134e5ccacc5ec91ea16efadd4 to before b70b0ddfed31fc92c8dc722d0afafc8e14cb550cAffected
  • 18cb261afd7bf50134e5ccacc5ec91ea16efadd4 to before 95c90e4ad89d493a7a14fa200082e466e2548f9dAffected
LinuxLinux
  • 5.9Affected
  • before 5.9Not affected
  • 5.10.225 through 5.10.*Not affected
  • 5.15.166 through 5.15.*Not affected
  • 6.1.107 through 6.1.*Not affected
  • 6.6.48 through 6.6.*Not affected
  • 6.10.7 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.